PT-2020-10263
CVE-2019-19856
·
تاريخ النشر
2020-01-15
·
تاريخ التحديث
2020-01-17
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Serpico version 1.3.0
Description
An issue was discovered that allows stored XSS via the
type parameter in the User Type on the "admin/list user" page.Recommendations
For Serpico version 1.3.0, consider restricting access to the "admin/list user" page until a patch is available, and avoid using the
type parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾